USN-6361-1: CUPS vulnerability

Published Sep 12, 2023
·
Updated

It was discovered that CUPS incorrectly authenticated certain remote requests. A remote attacker could possibly use this issue to obtain recently printed documents.

Affected Software

6 affected componentsFixes available
All of the following
ubuntu/cups<2.4.2-3ubuntu2.4
2.4.2-3ubuntu2.4
Ubuntu Ubuntu=23.04
All of the following
ubuntu/cups<2.4.1op1-1ubuntu4.6
2.4.1op1-1ubuntu4.6
Ubuntu Ubuntu=22.04
All of the following
ubuntu/cups<2.3.1-9ubuntu1.5
2.3.1-9ubuntu1.5
Ubuntu Ubuntu=20.04

Event History

Sep 12, 2023
Advisory Published
via Ubuntu·12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the vulnerability ID for this CUPS vulnerability?

The vulnerability ID for this CUPS vulnerability is CVE-2023-32360.

2

What is the severity of the CUPS vulnerability (CVE-2023-32360)?

The severity of the CUPS vulnerability (CVE-2023-32360) is not mentioned in the information provided.

3

How does the CUPS vulnerability (CVE-2023-32360) work?

The CUPS vulnerability (CVE-2023-32360) allows certain remote requests to bypass authentication, potentially allowing an attacker to obtain recently printed documents.

4

Which versions of CUPS are affected by the vulnerability (CVE-2023-32360)?

Versions 2.4.2-3ubuntu2.4, 2.4.1op1-1ubuntu4.6, and 2.3.1-9ubuntu1.5 of CUPS are affected by the vulnerability (CVE-2023-32360).

5

How can I fix the CUPS vulnerability (CVE-2023-32360)?

To fix the CUPS vulnerability (CVE-2023-32360), update to version 2.4.2-3ubuntu2.4 if you are using Ubuntu 23.04, version 2.4.1op1-1ubuntu4.6 if you are using Ubuntu 22.04, or version 2.3.1-9ubuntu1.5 if you are using Ubuntu 20.04.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203